AWS Security Engineer

About the role:

As an AWS Security Engineer at Sequoia, you will join Sequoia's Security team with a focus on AWS and DevOps Security to develop and implement security controls in AWS and Sequoia's products and technology solutions. You will have the opportunity to interact with many functional teams, build strong relationships and improve the data protection capability of the organization.

What You Get to Do:

• Primary point of contact on AWS security to protect our clients' data
• Partner with the DevOps and Technology teams on security risk assessments, AWS controls auditing and pen tests, key security initiatives for AWS and Sequoia technology solutions and products
• Develop use cases, policies, procedures and integrations for AWS RBAC and security event monitoring and produce metrics reflecting AWS security posture
• Design and build DevSecOps solutions starting with requirements gathering to service delivery
• Assist in SOC 2 Type II compliance audits
• Participate in incident management and response
• Identify areas of improvement, automate, and handle process exceptions and escalations when necessary
• Collaborate, organize and communicate changes to functional teams across the organization

What You'll Need:

• Bachelor's degree required with at least 5 years' experience in AWS-related security or administration role
• Strong experience with AWS IAM policies, CloudTrail and CloudWatch, GuardDuty, Security Hub, Inspector, WAF, Macie, Shield, Detective, Artifact, Audit Manager, IAM Access Analyzer, Trusted Advisor, AWS Config, and with 3rd party security solutions for AWS, including SIEM integrations
• Experience performing security assessments, threat modeling, and implementing defensive AWS security controls
• AWS Certified Security Specialty and Azure experience preferred
• Participate in secure architecture design, API security, threat and vulnerability management and other initiatives
• Implemented AWS integrations with SIEM/XDR platforms for the SOC
• Solid understanding of security principles such as least-privilege, segregation of duties, defense-in-depth, etc.
• Detail-oriented and good awareness of cyber threats